Page 2 - Table of Contents
Page 2 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Table of Contents Copyright Notice ....................................................................................................................... 1 License Agreement ...................
Page 8 - Copyright Notice
Page 1 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Copyright Notice Copyright © 2005-2007 Lieberman Software Corporation. All rights reserved. The software contains proprietary information of Lieberman Software Corporation; it is provided und...
Page 9 - License Agreement
Page 2 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved License Agreement This is a legal and binding contract between you, the end user, and Lieberman Software Corporation. By using this software, you agree to be bound by the terms of this agreem...
Page 10 - Country of Origin
Page 3 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Country of Origin This software was developed entirely in the United States of America.
Page 11 - Limited Warranty; This agreement is governed by the laws of the State of California.
Page 4 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Limited Warranty The media (optional) and manual that make up this software are warranted by Lieberman Software Corporation to be free of defects in materials and workmanship for a period of ...
Page 12 - Pre-Usage Considerations; ArcWeb Install Guide
Page 5 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Pre-Usage Considerations Please ensure that you have completed all steps in the appropriate installation checklist before you begin attempting to manage the Account Reset Console. Installatio...
Page 13 - Welcome to the Account Reset Console; Thanks for using the Account Reset Console!; application; The Account Reset Console Web Interface
Page 6 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Welcome to the Account Reset Console Thanks for using the Account Reset Console! Thank you for using Lieberman Software’s Account Reset Console! The Account Reset Console, or “ARCWeb” for sho...
Page 14 - accessed through the side menu.; Getting Started
Page 7 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved 1. Corporate Logo – your corporate logo can be put here instead of the Lieberman Software logo. 2. Tagline – your own tagline can be used here. In addition, nearly all colors in the Account R...
Page 16 - Accounts; – this menu contains pages for viewing the access and reset; Management; – this menu contains pages for setting group permissions, program; Configuration; – this menu contains pages for domain and data source management,; Index; immediately jump to any page you have rights to access.
Page 9 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved The top-level menus represent different parts of the ARCWeb product: • Accounts – this menu contains the direct account manipulation pages. Ordinary users use these pages to reset their own p...
Page 17 - Configuring the Account Reset Console; Overview
Page 10 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Configuring the Account Reset Console Overview Once you have installed and logged into the Account Reset Console, there are a few steps you will need to take to configure the tool to functio...
Page 19 - Configuring managed domains; You can see any status error messages by clicking the [; details
Page 12 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Configuring managed domains Once you have entered your selected super-user groups it is time to configure the specific domains that the Account Reset Console will be able to manage. Domain c...
Page 20 - Setting up data sources and logging; Status; line of the page should have a
Page 13 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Setting up data sources and logging Account Reset Console 4.X requires Microsoft MSDE/SQL Express or SQL Server 2000/2005 or later for logging and user verification purposes. Lieberman Softw...
Page 21 - Selecting program features; Account Reset Features; and; Password
Page 14 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved You can select any data source as your log destination using the dropdown box on this page. The Account Reset Console will reject your choice if you select a non-SQL Server data source. If y...
Page 23 - Password Change Features
Page 16 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved The Account Reset features allow you to configure what operations Help Desk personnel can perform on accounts they are resetting. By default, the options should allow all actions on the acco...
Page 24 - Configuring email
Page 17 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Configuring email If you want the Account Reset Console to be able to notify users via email of account or password resets, or to be able to email administrators and managers of scheduled ta...
Page 25 - Setting up group permissions; Group Access; . Program Access allows; Program Access
Page 18 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Setting up group permissions The final step before you begin using the basic features of the Account Reset Console is to delegate login and account reset permissions to your chosen groups. A...
Page 26 - own passwords or configure verification answers.; if they; . See the next section for more information.
Page 19 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved • Allow Web Logon: Allows users to log onto the Account Reset Console to reset their own passwords or configure verification answers. • Allow Reset of Other Users’ Accounts: Allows users to ...
Page 27 - Data Sources
Page 20 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Only by setting BOTH the “Allow Reset of Other Users’ Accounts” program access level AND the appropriate group access rule will a help desk user be able to reset another user’s account. For ...
Page 30 - and visit the Account Reset Console pages.
Page 23 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved to reset/unlock their accounts without requiring access to a browser or help desk personnel. For further information or to download, please visit the Lieberman Software web site at http://ww...
Page 32 - Updating the application’s appearance [Advanced]
Page 25 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved When initially evaluating the product, the defaults should suffice. The default character set is designed to protect MS Access and SQL Server databases. For more information on data security...
Page 33 - All colors should be in hexadecimal RGB format. Thus,; red; would be; green; application’s appearance, see “Appearance” later in this document.
Page 26 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved All colors should be in hexadecimal RGB format. Thus, red would be FF0000 and green 00FF00 . All “0” characters should be zeros, not o’s. For more information on changing the application’s a...
Page 38 - Changing Your Own Password
Page 31 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Changing Your Own Password Overview The Account Reset Console can allow users to reset their own passwords. Self-service password change is located under the “Accounts” menu item, in the “Ch...
Page 39 - Resetting User Accounts
Page 32 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Resetting User Accounts Overview The Account Reset Console can allow users to reset other user accounts. User account reset is located under the “Accounts” menu item, in the “Reset User Acco...
Page 40 - Account Reset Options; Reset the account password; – check this box to reset the account password. Once; Enabled account if disabled; – check this box to reset the “disabled” flag on the; Unlock account if locked; – check this box to reset the “locked” flag on the account.; Force user to change password on next login; – check this box to force the user to; Looking Up User Data
Page 33 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Account Reset Options Not all options will necessarily be available, depending on how your system administrators have configured the Account Reset Console. However, the available options wil...
Page 41 - Identity Configuration
Page 34 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved To look up user information, enter the user’s username and domain and click “Look Up Answers”. The user accounts you are permitted to view may be restricted. The user’s identity information ...
Page 42 - Setting Up Identity Information; Your verification information is not complete.; ” This indicates that you will not be able to
Page 35 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Setting Up Identity Information If the Account Reset Console is configured to allow users to verify their identity, and there are questions that the users can supply answers for, users will ...
Page 43 - Log Viewing
Page 36 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved The Account Reset Console protects the data sources accessed by the verification system against intrusion by limiting the characters you can enter into the answer fields. In this scenario, y...
Page 44 - Viewing the Access Log
Page 37 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved The Account Reset Console will display logs from the current logfile. Any logging information saved in a different log data source will not be displayed. There are two separate logs that the...
Page 45 - Viewing the Action Log; Scheduling Management Reports
Page 38 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Viewing the Action Log To view the Action Log, select “Action Log”, enter the desired range of dates and user account, and click “Display Log”. The Account Reset Console records the time tha...
Page 46 - Activate; from Active to Inactive status by clicking on the [; Deactivate; Adding Reports; “Password expiration”; – Select this report type to search for accounts with; “Self Reset Configuration”; – Select this report type to search for users who have not
Page 39 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Management reports are divided into two classes: “Active” and “Inactive” reports. Active reports are in the queue to be run when the task process runs; Inactive reports will never be run unl...
Page 47 - “Account inactivity”; – Select this report type to search for accounts which have been; Running Reports Immediately; Edit
Page 40 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved • “Account inactivity” – Select this report type to search for accounts which have been inactive (have not logged in) for the specified number of days. Any time a login is recorded on any do...
Page 48 - Viewing Management Reports
Page 41 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved • Task Name – the name you use to refer to the report task. This name will be stored in the reports database so you can find the task output. • Task runs on – select the days of the week on ...
Page 49 - Report Viewing Options
Page 42 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Report Viewing Options Scheduled task reports are saved in the current Account Reset Console log database. Any reports saved to a previous log database will not be available. The Account Res...
Page 50 - Scheduling Account Tasks
Page 43 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved The report shows the name of the task and the date of the run, and then displays a list of the users found, the actions taken, and the result of the action. You can also click on the name of...
Page 51 - Creating and Viewing Account Tasks; ] link next to its name. Similarly, you can switch a task from Active to; Adding Tasks
Page 44 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Creating and Viewing Account Tasks The scheduled account tasks that are currently saved are displayed in a table on the main scheduled tasks screen, as shown below: Scheduled tasks are divid...
Page 52 - – Select this task type to search for accounts with passwords; – Select this task type to search for accounts which have been; Running Tasks Immediately
Page 45 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved • “Password expiration” – Select this task type to search for accounts with passwords due to expire in the specified number of days. This scan searches for accounts whose passwords will be e...
Page 54 - Viewing Account Task Reports
Page 47 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved • Task Name – the name you use to refer to the task. This name will be stored in the reports database so you can find the task output. • Task runs on – select the days of the week on which t...
Page 57 - Set Program Access Rights
Page 50 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Set Program Access Rights Overview User groups can be allowed to login as normal users, allowed to reset other user accounts, and/or allowed to manage the Account Reset Console. Program acce...
Page 58 - Adding Access Rights; Permission “Stacking”; will not be able to log into the
Page 51 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved • Allow Web Logon – This access right allows members of the specified group to log onto the Account Reset Console through the web interface. o If the Account Reset Console is configured to a...
Page 59 - Set Group Access Rights
Page 52 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Set Group Access Rights Overview User groups that are allowed to reset other user accounts are strictly limited to resetting only accounts which they are permitted to affect. Group access ri...
Page 60 - – Granting an Administrative Group View User Answers rights; Group Access Permissions
Page 53 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved members of the “can reset” group are permitted to reset accounts of users in the “can be reset“ group. It is important to note that there are two different types of Group Access Rights: • Re...
Page 61 - Set Account Reset Features
Page 54 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Set Account Reset Features Overview The Account Reset Console can be configured to automatically change account flags during account reset or to allow the resetting user to select which flag...
Page 63 - Set Password Change Features
Page 56 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved • Reset Password through Account Reset Console – check this box to allow user passwords to be reset during account reset. If this box is not checked, help-desk users will not be given the op...
Page 64 - Password Change Options; Allow users to change their own passwords using the web interface
Page 57 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Password Change Options You can change password change options by selecting the appropriate values and clicking the “Save Program Features” button. • Allow users to change their own password...
Page 66 - Configuring Email Settings; Configuring Email
Page 59 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Configuring Email Settings Overview The Account Reset Console can send emails to users notifying them that their accounts have been reset. It can also notify administrators of scheduled task...
Page 68 - Appearance
Page 61 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Appearance Overview The Account Reset Console can be fully “skinned” to integrate with your existing network portal infrastructure. You can select colors and company banners to match your ow...
Page 69 - Colors; Pure white is “FFFFFF”; Altering the Page Header
Page 62 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Nearly all colors of the Account Reset Console can be altered at any time, as well as the banner and tagline at the top of the page. To change the appearance of the Account Reset Console, ch...
Page 70 - Customizing the Side Menu; inactive; Customizing the Page Content
Page 63 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved The background color of the menu bar can be changed by entering a new value into the “Menu Bar Color” box. “Text Color” refers to the inactive menu options; “Selected Text Color” refers to t...
Page 71 - Configuring Mobile Settings; Display tagline; – You can preserve vertical screen space on your mobile device by; Save Mobile Settings; – Click this to save your changes.
Page 64 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Configuring Mobile Settings Overview The Account Reset Console has a mobile site (available at the /Mobile subdirectory) which can be configured to match nearly any mobile device’s screen av...
Page 72 - The; name; components will refer to the data source.; type; “Microsoft Jet”: Refers to a Microsoft Jet data source.
Page 65 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Data Sources Overview The Account Reset Console can utilize any ADO-compatible data source as an information source for user identity verification or logging. New data sources can be created...
Page 73 - status; Adding a Data Source; How the Account Reset Console tests data sources
Page 66 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved o “ConnectionStr”: Refers to any other ADO-compatible database. Users must explicitly construct their own ADO connection string for this sort of data source connection (see “Editing a Data S...
Page 75 - Editing a General ADO-Compatible Data Source; Logging Configuration; The logging database and its current status is shown on the tab:
Page 68 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Editing a General ADO-Compatible Data Source General ADO-Compatible data sources are characterized by an explicit connection string. You can enter your own connection string, allowing you to...
Page 76 - Changing the Log Database; Log Requirements; User Verification Configuration
Page 69 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Changing the Log Database You can select any working data source to set as the logging database. The Account Reset Console will not allow you to select a data source that it cannot confirm a...
Page 77 - Adding and Removing Questions
Page 70 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved User verification configuration is located under the “Configuration” main menu item, in the “Verification” tab. The verification configuration can be managed by users with super-user account...
Page 79 - Verification Query Types
Page 72 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved The default value for each question is “Use built-in verification database”. When this setting is selected, all other values (data source, query text) are ignored and the Account Reset Conso...
Page 80 - Designing Queries; String
Page 73 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved you do not need to enter a setting query. If this checkbox is checked, you will need to enter a setting query. The Account Reset Console uses this query to set the answer in the database whe...
Page 82 - Domain Configuration
Page 75 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Domain Configuration Overview The Account Reset Console can manage multiple domains simultaneously. Domain configuration is located under the “Configuration” menu item, in the “Domains” tab....
Page 83 - Viewing Domain Details; Setting the Default Domain
Page 76 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Viewing Domain Details Clicking the [ details ] link next to a domain name will allow you to view details on that domain. If there are multiple domain controllers available, you can set ARC ...
Page 84 - Application Security; Session timeout; – This is the number of minutes before the web server will expire the
Page 77 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Application Security Overview The Account Reset Console is a password management application and as such must be security-aware. ARCWeb is capable of protecting you against SQL injection att...
Page 85 - – ARCWeb uses only server-side sessions to store login; Server-side answer verification; – All user-provided answer strings are checked in the; Super-User Configuration
Page 78 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved button. The default timeout period is 20 minutes, but if you have a need to make your environment more secure, you can set this as low as 1 minute. • Allowed charset – This is the set of cha...
Page 86 - Viewing or deleting existing Super-User Groups; Super-User Permissions
Page 79 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved To add a Super-User group, select the domain or local machine as appropriate, enter the name of the group in the edit box, and click “Set Group as SuperUsers”. This will add the windows grou...
Page 87 - Licensing
Page 80 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Licensing Overview The Account Reset Console requires a valid license from Lieberman Software Corporation to run. The Licensing page allows you to view the current license details as well as...
Page 89 - The ARCWeb Site Index
Page 82 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved The ARCWeb Site Index Overview The Account Reset Console has an index page on the far right of the main menu which shows you every page in the application. This is for your convenience in na...
Page 90 - Appendix A; Troubleshooting
Page 83 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Appendix A Troubleshooting Q: When you attempt to access the web page, you receive the error: “Object Disabled”. A: This error is caused by ASP processing being disabled. This can be correct...
Page 91 - ” followed by a; Execute Permission; to “; Scripts only
Page 84 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Q: After installation and web site configuration, logon screen is displayed successfully. When a logon is attempted, the message: “Error: Database Not Available”. A: This error is caused by ...
Page 94 - Please note that the path will be unique for your installation.; Directory Listing
Page 87 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved Please note that the path will be unique for your installation. Q: When attempting to load the web site, you receive the following error: “ Directory Listing Denied” or you see the contents ...